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IN THE CIAIMS 

1. (currently amended) An information processing system 
for distributing encrypted message data, said system comprising: 
a receiving device, including: 

holding oncryption procQaaing m eans for holding a key 
set that is specific to said receiving device and that 
which includes a portion of a plurality of node keys and a 
corresponding leaf key, the plurality of node keys being 
associated with each — a plurality of nodes whereby a given 
one of the plurality of node keys is associated with a 
particular one of the plurality of nodes, the plurality of 
nodes being arranged according to a hierarchical tree 
structure having a root node and a plurality of leaves, the 
portion of the plurality of node keys being the node keys 
associated with the nodes disposed along - ift — a particular 
path from a — feeg — key — the root node of a — the hierarchical 
tree structure to a particular one of the plurality of 
leaves# nodo that is associated with said receiving device— 
and with its corresponding ^fehe — hiorarchical — tree — otructurc 
having — a — plurality — — different — dcvicca — as — its — Icavca — and 
having an aooociatod leaf ke y for each dcvico , and 

encryption processing means for decrypting encrypted 
message data distributed to said receiving device by using 
said the key set; and 
a distributing device, including: 

message data generating means for generating a renewal 
node key by which at — least one of — a plurality of — node keys 
4rB — renewed by oaid roooiving device, — the plurality of nodo 

keys — and — a — plurality — loaf — keys — being — rcopcctivcly 

aooociatod with a group — conotitutod of — nodes — af=id — loavoa — e# 

the — hierarchical — tree — otructurc, a»d — #eee — generating — an 

enabling key block (EKB) within which oaid renewal node key 
is — encrypted using one — or more keys selected from the 
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group consisting of the portion of the plurality of node 
keys or one — — the plurality of and the corresponding leaf 
keye, and 

message data distributing means for distributing a 
storage medium storing first m essage data that includes 
data in which first content is encrypted with a content 
key, data in which the content key is encrypted by a 
content key encryption key, and a link to a location on the 
storage medium wherein data is stored in which the content 
key encryption key is encrypted by the enabling key block 

(EKB)^ and storing second to which other m essage data that 
includes another link to the location on the storage medium 
wherein the data is stored in which the content key 
encryption key is encrypted by the enabling key block 

(EKB)- 3re — linked, fefee content — encryption — key — being — oaid 

renewal node key . 

2. (currently amended) The information processing system 
according to claim 1_^ wherein said encryption processing means 
in of said receiving device obtains oaid a renewal node key by 
decrypting the proccaaing — ef — oaid enabling key block (EKB) — aad 
executing — decrypting — e# — oaid — encrypted — moooago — data — by — fehe 
renewal node Iccy obtained . 

3. (cancelled) 

4. (currently amended) The information processing system 
according to claim 1_^ wherein oaid — at least one of the first 
message data and the second message data includes an 
authentication key used in the authentication processing. 

5. (currently amended) The information processing system 
according to claim lj_ wherein oaid — at least one of the first 
message data and the second message data includes a key for 
generating an integrity check value (ICV) of the its content . 

6. (currently amended) The information processing system 
according to claim 1^ wherein oaid — at least one of the first 
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message data and the second message data includes a program 
code . 

7. (cancelled) 

8. (currently amended) The information processing system 
according to claim lj_ wherein said message data distributing 
means and said receiving device roopcctivcly — each include have 
aH — associated authentication processing means for executing 
authentication processing, and a distribution of said message 
data is performed on the condition that the authentication 
processing between said message data distributing means and said 
receiving device has been completed. 

9. (currently amended) The information processing system 
according to claim lj_ wherein there — cxioto — a — different — an 
intermediate device is disposed between said message data 
distributing means and said receiving device, and said message 
data distributing means generates and distributes aR — enabling 
key block (EKB) data and encrypted first and second m essage data 
that can be decrypted only in target devices targeted for 
distributing said message data. 

10. (currently amended) The information processing system 
according to claim 1_^ wherein oaid — the hierarch yical tree 
structure includes a category group conatitutcd ao — a group , — with 
efte — node — as — a — tep — node , — containing that includes only the node s 
and leaves which are connected — art — subordinate to a further one 
of the plurality of of aaid top nodes ; 

wherein oaid the category group is associated with 

conotructcd — as — a set of devices that belong to a category 
defined solely by a kind of ar— device, a kind of a service or a 
kind of a managing means . 

11. (currently amended) The information processing system 
according to claim 10^ wherein oaid the category group further 
includes one or more sub -category groups in the lower — otage — a# 
oaid hierarch yical tree structure; 
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wherein oaid — the sub -category group is associated with 
GonotruGtcd — ae — a sub- set of group o — devices that belong to a 
category defined solely by another a ^kind of a^device, a^kind of 
a service, or a — kind of a managing means, 

12. (currently amended) An information processing method 
for distributing encrypted message data, said method 
comprising : a mcooagc data generating otop of 

generating a renewal — node — key by which at — leaot — efie — e# 
a plurality of node keys — i-s — renewed , the plurality of node 
keys being associated with a plurality of nodes whereby a 
given one of the plurality of node keys is associated with 
a particular one of the plurality of nodes, and a plurality 
ef — leaf — keys — being — rcapcctivcly — asoociatcd — with — a — group 
Gonotitutcd — — nodes — and — Icavoo connected — at — positions 
subordinate — fee — a — fe^p — node — — the plurality of nodes being 
arranged according to a hierarchical tree structure having 
a root node and a plurality of different — devices — as — tfes 
leaves, the plurality of leaves being associated with a 
plurality of leaf keys and with a plurality of devices 
whereby a given one of the plurality of leaves is 
associated with a specific one of the plurality of leaf 
keys and with a particular one of the plurality of devices; 
and 

generating an enabling key block (EKB) within — which 
said — renewal — node — key — i-s — encrypted — using one — or more 
keys selected from the group consisting of the plurality of 
node keys — eiie — ef — and the plurality of leaf keys; a 
message data distributing step of 

distributing a storage medium storing first m essage 
data that includes data in which first content is encrypted 
by a content key, data in which the content key is 
encrypted by a content key encryption key, and a link to a 
location on the storage medium wherein data is stored in 
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which the content key encryption key is encrypted by the 
enabling key block (EKB)_^ and to which other storing second 
message data that includes another link to the location on 
the storage medium wherein the data is stored in which the 
content key encryption key is encrypted by the enabling key 
block (EKB) 4 zB — link e d , the content key encryption key being 
paid the renewal node key; and a decrypting otcp of 

decrypting, at a given one of the plurality of 
different devices, oaid — the encrypted first message data 
using an associated key set that is specific to and stored 
in that device and using the data in which the content key 
encryption key is encrypted by the enabling key block 
(EKB) , each — eae — — fehe — plurality — e£ — different — devices 
holding — a — different — the associated key set formed — &^ 
including a specific portion of the plurality of node keys 
opecif ic — fee — each — that are associated with the nodes iii 
disposed along a particular p ath from the top key root node 
of oaid the hierarchical tree structure to a particular one 
of the plurality of lea ves- f- node — opecif ic — fee — that is 
associated with that device and a — holding — including the 
leaf key Qpccif ic — fee — associated with that device so that 
the key set associated with a given one of the plurality of 
devices is different than the key set associated with 
another one of the plurality of devices . 

13. (currently amended) The information processing method 
according to claim 12_j_ wherein said decrypting proceooing — step 
includes a renewal node key obtaining step of obtaining oaid a 
renewal node key by decrypting p roceooing — e£ — the enabling key 
block (EKB)-^_^ and a message data decrypting step for executing 
decryption of the encrypted first m essage data using the by oaid 
renewal node key . 

14. (cancelled) 
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15. (currently amended) The information processing method 
according to claim 12 wherein oaid at least one of the first 
message data and the second message data includes an 
authentication key used in the authentication processing. 

16. (currently amended) The information processing method 
according to claim 12_^ wherein oaid — at least one of the first 
message data and the second message data includes a key — for 
generating an integrity check value (ICV) of its contente. 

17. (currently amended) The information processing method 
according to claim 12_^ wherein oaid — at least one of the first 
message data and the second message data includes a program 
code . 

18- (cancelled) 

19. (currently amended) The information processing method 
according to claim 12_^ further comprising an authentication 
processing step for executing authentication processing, and 

wherein oaid diotribution of said message data distributing 
step is performed on the condition that said authentication 
processing step has been completed. 

20. (currently amended) The information processing method 
according to claim 12, wherein said message data distributing 
step generates and distributes an enabling key block (EKB) data 
and aR — encrypted first and second message data that can be 
decrypted only in a target device targeted for receiving said 
message data. 

21. (currently amended) An information recording medium 
having stored therein data, said data comprising: a renewal node 
key by which at Icaot one of 

a plurality of node keys— is — renewed , the plurality of 
node keys being associated with a plurality of nodes 
whereby a given one of the plurality of node keys is 
associated with a particular one of the plurality of nodes, 
and a plurality of — loaf — kcyo being — rcopoGtivcly aooociatod 
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with a — group — conatitutcd — — nodco — and — Icavco — aonncotcd at 
pooitiono — oubordinatc — fee — fefee — feep — no do — — the plurality of 
nodes being arranged according to a hierarchical tree 
structure having a root node and a plurality of different 

dcviceo — as ite — leaves, the plurality of leaves being 

associated with a plurality of leaf keys and with a 
plurality of devices whereby a given one of the plurality 
of leaves is associated with a specific one of the 
plurality of leaf keys and with a particular one of the 
plurality of devices ; 

an enabling key block (EKB) within which oaid renewal 
node — key — which is encrypted using one — or more keys 
selected from the group consisting of the plurality of node 
keys or one of and the plurality of leaf keys; and 

first a r— message data that includes data in which first 
content is encrypted with a content key, data in which the 
content key is encrypted by a content key encryption key, 
and a link to a location on said information recording 
medium wherein data is stored in which the content key 
encryption key is encrypted by the enabling key block 
{EKB)j_ and 

second fee — which — other — ^message data that includes 
another link to the location on said information recording 
medium wherein the data is stored in which the content key 
encryption key is encrypted by the enabling key block 

(EKB) - are linked, fefee — content — encryption — key — being — oaid 

renewal node Jcey . 

22. (cancelled) 

23. (cancelled) 

24. (currently amended) The information recording medium 
according to claim 21 wherein said information recording medium 
stores an integrity check value (ICV) of at least one of the 
first content and the second contents . 
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25. (currently amended) A program providing computer- 

readable m edium for providing a computer program storing 

instructions for carrying out a method of decrypting encrypted 
content, said method comprising: 

obtaining a storage medium storing first message data 
that includes data in which first content is encrypted by a 
content key, data in which the content key is encrypted by 
a content key encryption key, and a link to a location on 
the storage medium wherein data is stored in which the 
content key encryption key is encrypted by the enabling key 
block (EKB) , and storing second message data that includes 
another link to the location on the storage medium wherein 
the data is stored in which the content key encryption key 
is encrypted by the enabling key block (EKB) ; a — renewal 
node key obtaining stop of 

obtaining an renewal — node — key — by — linking — fee — enabling 
key block — (EKB) — data — within which — fefee — renewal — node — key — ts 
encrypted and — to which — other — content — is — linked, — decrypting 
the enabling key block (EKB) using at least one of or more 
keys selected from the group consisting of a plurality of 
node keys er — ene — — and a plurality of leaf keys, the 
plurality of node keys being associated with a plurality of 
nodes whereby a given one of a plurality of node keys is 
associated with a particular one of the plurality of nodes, 

and the plurality of leaf keys being rcopcctivcly 

associated with a group — conatitutcd plurality of nodoo — and 
leaves whereby a given one of the plurality of leaf keys is 
associated with a specific one of the plurality of leaves, 
Gonncctcd — afe — pooitiono — subordinate — fee — a — feep — node — e# — the 
plurality of nodes being arranged according to a 
hierarchical tree structure having a plurality of different 
devices — as — ifes — root node and the plurality of leaves, at 
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least one of the plurality of node keys being renewable fey 
using the renewal node key; 

decrypting, using the enabling key block, the data in 
which the content key encryption key is encrypted; a — otcp 
e# 

decrypting, using oaid — renewal — node — the content key 
encryption key, — obtain — a ^the data in which content key 
is encrypted ; and a otcp of 

decrypting oaid — the at least one of the encrypted 
first content using aaid the content key. 

26. (currently amended) An information processing method 
for distributing encrypted message data, said method comprising: 
generating a renewal node key by which at — loaat one of 
a plurality of node keys — is — roncwod , the plurality of node 
keys being associated with a plurality of nodes whereby a 
given one of the plurality of node keys is associated with 
a particular one of the plurality of nodes, and a plurality 
e#: — loaf — koyo — being — rcopcctivcly — aoQOciatod — with — a — group 
constituted — of nodes — aiid — Icavco — connected — at — poaitiono 
subordinate — fee — a — feep — node — — the plurality of nodes being 
arranged according to a hierarchical tree structure having 
a root node and a plurality of different — dcvicco — as — ifes 
leaves, the plurality of leaves being associated with a 



whereby a 


given 


one of the 


plurality of leaves is 


associated 


with a 


specific one 


of the plurality of leaf 



keys and with a particular one of the plurality of devices ; 

generating an enabling key block (EKB) within — which 
oaid — renewal — node — key — is — encrypted — using one of — or more 
keys selected from the group consisting of the plurality of 
node keys or one of and the plurality of leaf keys; and 

generating a storage medium storing first m essage data 
that includes data in which first content is encrypted by a 
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content key, data in which the content key is encrypted by 
a content key encryption key, and a link to a location on 
the storage medium wherein data is stored in which the 
content key encryption key is encrypted by the enabling key 
block (EKB)_^ and to which other storing second m essage data 
that includes another link to the location on the storage 
medium wherein the data is stored in which the content key 
encryption key is encrypted by the enabling key block 

(EKB) j rS linked , t^^^ content encryption — key — being oaid 

renewal — node — key, — to distribute the first message data and 
the second message data to a plurality of devices . 

27. (cancelled) 

28. (currently amended) The information processing method 
according to claim 26^ wherein paid at least one of the first 
message data and the second message data includes an 
authentication key used in the authentication processing. 

29. (currently amended) The information processing method 
according to claim 2 6^ wherein said — at least one of the first 
message data and the second message data includes a key of for 
generating an integrity check value (ICV) of contents. 

30. (cancelled) 

31. (currently amended) An information processing method, 
comprising : 

obtaining a storage medium storing first message data 
that includes data in which first content is encrypted by a 
content key, data in which the content key is encrypted by 
a content key encryption key, and a link to a location on 
the storage medium wherein data is stored in which the 
content key encryption key is encrypted by the enabling key 
block (EKB) , and storing second message data that includes 
another link to the location on the storage medium wherein 
the data is stored in which the content key encryption key 
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is encrypted by the enabling key block (EKB) ; a — renewal 
node key obtaining otop of 

obtaining — a — renewal — node — key — by — linking — fee — enabling 
key block — (EKB) — data within which — the — renewal — node — key — 

encrypted aad fee which variouo contento a3?e linked, 

dccr;y^ting the enabling key block (EKB) using at least one 
o€ — or more keys selected from the group consisting of a 
plurality of node keys er — efie — ef — and a plurality of leaf 
keys, the plurality of node keys being associated with a 
plurality of nodes whereby a given one of a plurality of 
node keys is associated with a particular one of the 
plurality of nodes, a ed — the plurality of leaf keys being 
reopectivcly — associated with a group — conotitutcd plurality 
of nodeo and leaves whereby a given one of the plurality of 
leaf keys is associated with a specific one of the 
plurality of leaves, connected — at — pooitiono — oubordinatc — fee 
a — feep — node — a£ — the plurality of nodes being arranged 
according to a hierarchical tree structure having a 
plurality — e€ — different — dcviceo — as — ife^ — root node and the 
plurality of leaves, at least one of the plurality of node 
keys being renewable by using the renewal node key; 

decrypting, using the enabling key block (EKB) , the 
data in which the content key encryption key is encrypted; 
a content Iccy obtaining otcp of 

decrypting, using said — renewal — node — the content key 
encryption key, fee — obtain — a ^the data in which content key 
is encrypted ; and an executing otcp of 

decrypting oaid the encrypted first content using oaid 
the content key . 

32. - 33- (cancelled) 
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